Fiduciary Intelligence
•
September 23, 2026

Your Self-Funded Plan Is a Balance Sheet Risk

Abhishek Ghosh

TABLE OF CONTENTS

A self-funded plan is a balance sheet risk because the employer pays every claim from its own funds and holds fiduciary duty under ERISA for paying them correctly. Managing it like one means independent claims audits, contractual audit rights, monthly monitoring and documented committee review, rather than relying on a TPA's sample-based accuracy reports.

Eighty percent of covered workers at large firms now sit in a self-funded plan, according to the KFF 2025 Employer Health Benefits Survey. Those employers pay each claim from their own cash. Most also assume someone is checking that claims were paid correctly. In practice, your self-funded plan may be one of the least examined line items on your income statement.

Key Takeaways

1. The employer owns the financial risk and ERISA fiduciary duty for every claim, regardless of who processes it.
2. Oversight stays thin because contracts, committee time, and data access often favor delegation.
3. Audit firms report first-year recoveries of 1% to 3% of claims spend from full independent reviews.
4. The fix has three parts: audit rights in the contract, a full independent review, and a recurring committee routine.
5. A documented process is the strongest form of fiduciary protection.

What Makes a Self-Funded Plan a Balance Sheet Risk

A self-funded plan is a health benefit arrangement in which the employer pays employee medical claims directly from company funds instead of buying insurance. The employer carries the financial risk and the fiduciary duty for every claim, even when a TPA processes it. KFF found that 67% of covered workers are in self-funded plans, including 27% at firms with 10 to 199 workers and 80% at larger firms.

Most leaders assume the TPA absorbs the accuracy risk because it handles the paperwork. ERISA says otherwise. Section 404(a)(1)(B) places responsibility for claims accuracy on the plan sponsor, and the sponsor must select and monitor its TPA with prudence and loyalty.

On the balance sheet, claims are a liability that grows with every service your members use. Stop-loss insurance limits catastrophic claims, but it does not fix routine payment errors. Every dollar paid wrongly leaves plan assets for good unless someone recovers it.

Why the Oversight Gap Exists

Delegation feels like transfer, and that belief creates the gap. Once a plan sponsor signs an administrative services agreement, claims processing moves out of sight. The fiduciary duty does not move with it. Self-funded plans are also exempt from most state insurance laws, so no state regulator fills the void.

Contract terms widen the gap. Many agreements limit audit frequency, cap the number of claims an auditor may pull or restrict access to line-level data. Performance guarantees tend to measure turnaround time and self-reported accuracy rather than independently verified results. TPAs often lack the tools to deliver full claim detail on request, so the request quietly fades.

Capacity is the third cause. Benefits committees meet a few times a year, and their members rarely have claims processing backgrounds. Finance sees funding reports and HR hears employee complaints, but neither sees the payment-level detail where errors live. Vendor changes reset the clock as well, because a prior administrator's claims often go unreviewed when the plan moves to a new one.

The Real Cost of Thin Claims Oversight

Weak oversight costs money in the claims budget first. A plan that pays $25 million in claims each year with a 0.5% payment error loses $125,000 annually, and that money does not return on its own. Errors compound because the same incorrect pricing rule or eligibility flag repeats on every affected claim.

Regulatory exposure comes next. The Department of Labor's Employee Benefits Security Administration (EBSA) recovered more than $1.4 billion for retirement, health and welfare plans in fiscal year 2025. It closed 878 civil investigations, and 556 of them produced monetary results or corrective action. EBSA also opened 291 investigations from Benefits Advisor referrals, so participant complaints can start the process.

Litigation risk is real but unsettled. Courts dismissed suits against Johnson & Johnson and Wells Fargo over prescription drug management for lack of standing. A March 9, 2026 ruling in Stern from the Southern District of New York let some similar claims proceed, so sponsors should not treat standing as a permanent shield. Groom Law Group tracks these cases.

What Is Actually Happening Behind the Scenes

Pricing and contract errors

A claim priced under the wrong provider contract or fee schedule pays the wrong amount. The payment still looks plausible on a summary report, which is why these errors can survive for years. One incorrectly loaded rate can misprice every claim from a single facility, and high-dollar inpatient stays magnify the damage.

Eligibility and coordination failures

Claims for ineligible dependents, terminated employees or members with other primary coverage get paid when eligibility files lag behind reality. Coordination of benefits errors leave the plan covering costs that another carrier or Medicare should bear. Life events such as divorce or a spouse's new job often go unreported to the plan.

Duplicate billing and plan document mismatches

Duplicate charges and unbundled procedures can slip past automated edits. Services excluded by the plan document sometimes pay because the system was configured from an outdated version of it. Manual overrides made for urgent member requests add another layer. Each error looks small in isolation, but the annual total does not.

Why Current Approaches Fall Short

A claims audit is an independent review of paid claims against the plan document and provider contracts. Most plans rely instead on the TPA's own quality checks. One audit firm describes a standard TPA audit as a stratified sample of 250 to 400 claims, which equals roughly 0.3% to 0.5% of activity on a plan with 80,000 annual claims. Sampling at that level is like a restaurant inspector tasting one dish in a kitchen that serves eighty thousand meals.

Area Status Quo Recommended Approach
Review scope Sample of a few hundred claims Review of 100% of claims
Who reviews TPA's internal quality team Independent auditor with no stake in the result
Timing Set by the TPA's schedule Full retrospective audit, then quarterly or continuous monitoring
Data access Summary reports Line-level claims data
Contract terms Guarantees without penalties Audit rights, refund deadlines and penalty-backed guarantees
Governance Ad hoc discussion Documented committee review with recorded corrective actions

TPA quality checks still catch processing defects, and they belong in the mix. They work best as one layer of a system that also includes independent verification.

How to Fix It

Closing the gap takes seven steps, and most can start within a quarter.

How to Fix It

1. Assign ownership. Charter a fiduciary committee with finance, HR and legal members, and put claims oversight on every quarterly agenda.
2. Amend the administrative services agreement. Secure audit rights, line-level data access, refund deadlines for overpayments and penalties for missed guarantees.
3. Commission a full claims audit. Start with the most recent complete plan year and hire a firm that has no financial stake in the outcome.
4. Verify eligibility. Run a dependent eligibility audit and reconcile terminated-employee files against paid claims.
5. Extend review to pharmacy. Request rebate, fee and pricing data from your PBM, and use every audit right in that contract. Read the Davis Wright Tremaine summary of the 2026 reforms.
6. Shift to continuous monitoring. Replace annual snapshots with monthly or quarterly reports so errors surface while they are small.
7. Keep the record. File committee minutes, audit scopes, findings and corrective actions in one place, because prudence is judged by process.

Red Flags That Signal the Problem Applies to Your Plan

A few warning signs reliably point to an oversight gap. Two or more justify a full review this plan year.

Red Flags

1. No independent claims audit has taken place in the last three years.
2. No one on the benefits committee can state the plan's overpayment rate for the last plan year.
3. Your TPA shares summary reports but never detail-level claims data.
4. The service agreement lists performance guarantees with no penalty language for missed targets.
5. Specialty drug or large-claim spend jumped sharply and no one can explain why.
6. Dependent eligibility has not been re-verified in several years.
7. Renewal conversations focus on cost trend and never on payment accuracy.
8. Participants report balance bills or denials that no one can explain.

The ROI of Doing It Right

Independent oversight often pays for itself in year one. Audit firms report that a comprehensive independent audit typically recovers 1% to 3% of annual claims spend in its first year, often exceeding the audit's cost. On $10 million in annual claims, that range equals $100,000 to $300,000. It is an industry benchmark from audit providers rather than a government figure, and results vary by plan.

First-year recovery is a one-time catch-up. Continuous monitoring turns it into ongoing savings by fixing errors at the source. Clean claims data also strengthens stop-loss renewals and TPA contract negotiations. Recovery windows are set by contract, so earlier audits capture more.

Fiduciary protection is the third return. A documented and repeated review process gives counsel, insurers and regulators evidence of prudence that a vendor contract alone cannot supply. Sponsors should also confirm that fiduciary liability insurance is in force, since recent litigation has targeted health plan oversight. The EBSA monetary results fact sheet shows what enforcement looks like in practice.

Conclusion and Next Steps

A self-funded plan turns health claims into a balance sheet exposure that only the employer can manage. The TPA processes the claims, but the fiduciary record belongs to you. Sponsors who verify payments independently recover dollars, tighten contracts and build a defensible file.

Start this month. Ask your TPA for line-level claims data and a copy of its audit clause. Then request an independent claims audit assessment to size the opportunity on your plan. Contact our team to schedule a claims oversight review.

Frequently Asked Questions

How often should a self-funded plan be audited?

‍Many sponsors start with a full retrospective audit, then move to quarterly or ongoing reviews so errors surface while still small.

Does HIPAA prevent an independent claims audit?

‍No. Auditors typically work under business associate agreements, which permit access to the protected health information needed for the review.

Do level-funded plans carry the same duty?

‍Yes. Level-funded plans are still ERISA plans, and KFF reports 37% of covered workers at firms with 10 to 199 workers are in one.

Can a claims audit strain the TPA relationship?

‍Rarely. Most large TPAs expect independent audits, and a clear audit clause sets expectations before any review begins.

What did the 2026 PBM reforms change?

‍DOL proposed PBM fee disclosure and audit rules for self-funded plans on January 30, 2026, and Congress enacted related reforms February 3, 2026.

Does stop-loss cover claims paid in error?

‍Often not. Stop-loss contracts typically reimburse only claims paid according to the plan document, so payment errors can jeopardize reimbursement.

‍

‍

‍

‍